[Oisf-users] reputation list vs datasets

[Andreas Herz]

Hi Nidhi,

On 04/11/19 at 14:19, Nidhi V Singhai wrote:
> I am testing traffic with IP reputation list and in my setup suricata
> throughput drops significantly when I enable the rule (from 20Gbps to
> 8Gbps). I have around 18k hosts currently.
> I wanted to know if I can use datasets in 5.0.0 for the same, and would it
> give me better performance? Currently, we are on 4.1.5 but have plans to
> upgrade to 5.0.0 soon.

So far it's rather hard to tell, but in general first tests with the
sets look quite promising:

https://trex421.blogspot.com/2019/10/

-- 
Andreas Herz